Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
File:                     JxvhwGrxHz7sHcsZa8qN578I-5g.mft (raw, json)
Hash identifier:          /GGlHgOMR4OOA9YaDZj0wojFEAopkps5ZDjZHiSTwOQ=
Subject key identifier:   9F:9F:64:00:2A:A1:15:D8:DC:85:34:66:57:0C:87:44:52:36:02:F6
Authority key identifier: 27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98
Certificate issuer:       /CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
Certificate serial:       01962E98A543B4187080613111698B4C4A1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: JxvhwGrxHz7sHcsZa8qN578I-5g.crl (hash: KdrQCnW7nSEBXELiKQ1FGUUxXTSXh7nlh1eVc9d/q7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:43:b4:18:70:80:61:31:11:69:8b:4c:4a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=271be1c06af11f3eec1dcb196bca8de7bf08fb98
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=9f9f64002aa115d8dc853466570c8744523602f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:59:34:15:18:af:8a:f1:d6:8a:c2:64:9a:
                    a0:f9:10:be:73:cf:bb:9c:f4:0d:1f:83:84:35:13:
                    f8:19:0c:d7:5a:a3:8a:62:57:c9:eb:8e:e4:ac:3c:
                    41:8b:2d:0f:49:ba:fa:e2:96:57:cd:6d:a8:65:6f:
                    f4:fb:b3:b5:47:14:82:5e:18:6e:e7:23:b3:60:30:
                    79:49:0c:f4:3e:41:ec:7b:da:37:83:d2:b4:b8:ed:
                    22:43:14:9e:0f:2b:cb:91:bd:f3:af:e6:95:61:80:
                    30:8a:55:a0:76:84:47:cc:66:3c:1f:7f:11:14:38:
                    90:59:2b:9c:b6:56:55:81:ab:b7:80:e9:c2:ca:b2:
                    bf:36:56:55:63:4c:d8:5b:fd:9e:34:60:5e:39:a5:
                    26:9e:32:4d:d7:15:9a:d8:a7:f9:38:73:f2:9c:05:
                    c3:67:ce:28:14:a8:0f:8d:ab:b6:0a:5e:30:1e:60:
                    d2:5c:21:1f:63:f1:d5:48:6a:cc:d4:0e:e8:8f:51:
                    7e:64:c2:82:0e:8f:23:10:57:62:17:06:cf:bc:ae:
                    e7:1d:56:8b:11:47:f9:2c:31:c2:8e:26:b4:40:ec:
                    0d:77:1b:b9:a4:c4:29:9b:1f:6a:bf:78:22:44:62:
                    2b:62:f0:87:63:b2:7c:99:14:73:e2:e6:87:a0:3e:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9F:64:00:2A:A1:15:D8:DC:85:34:66:57:0C:87:44:52:36:02:F6
            X509v3 Authority Key Identifier:
                keyid:27:1B:E1:C0:6A:F1:1F:3E:EC:1D:CB:19:6B:CA:8D:E7:BF:08:FB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxvhwGrxHz7sHcsZa8qN578I-5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/149d64-83c4-4a7e-b4b5-474207daef43/1/JxvhwGrxHz7sHcsZa8qN578I-5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ae:0a:66:ea:13:40:ce:9a:1a:09:d6:af:53:64:ad:f1:fc:
         43:70:6c:a1:b4:2b:7c:c7:14:8e:4f:5b:f2:eb:96:70:b6:67:
         26:59:cb:fd:6d:cf:62:1e:d8:e8:6a:45:25:1e:a5:e9:b6:e2:
         a4:fc:18:6a:61:74:91:7b:9b:04:67:ea:58:23:e4:b3:e9:d6:
         fb:76:1b:9f:ff:fe:ef:a4:4c:04:24:89:0d:67:ed:a6:77:ef:
         f8:25:e3:5f:9b:94:ed:2c:72:d3:8a:df:09:17:d1:e0:26:ab:
         cf:b1:54:14:e0:03:23:80:77:a2:78:98:af:9f:03:4c:db:f9:
         b1:64:16:28:ff:2a:93:ea:2c:a2:53:d0:ec:d4:17:3a:ea:c2:
         17:c8:d4:2d:37:00:d3:14:3b:b3:91:30:ed:14:6e:37:6c:8a:
         dd:7c:8e:36:6c:3a:69:49:16:e6:71:7a:8d:ba:7f:97:6a:ee:
         63:7f:5d:24:d9:4c:d2:34:e8:96:21:f1:68:60:3a:c8:4d:ef:
         61:13:b2:b3:a3:94:c7:9b:ce:b6:14:e8:6e:9f:e4:6a:71:40:
         7a:4a:d8:10:72:e1:3f:bd:92:fd:12:9d:8c:a4:85:0d:df:61:
         bf:e8:f6:93:09:b3:a1:a2:d5:12:e5:67:75:9d:99:ca:9a:77:
         ae:60:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----